Aerospike Database Server Index Name Code Execution Vulnerability(CVE-2016-9052)

Summary An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow in the function assindexsimatchbyiname resulting in remote code execution. An attacker ca...

CVE-2015-7510

CVE-2015-7510 is a stack-based buffer overflow in the NSS module nss-mymachines of systemd, specifically in getpwnam and getgrnam. The vulnerability is described as enabling a crash/DoS under exploitation of the NSS functions. Public references show patches/update activity (e.g., systemd commit a...

FreeBSD : perl -- multiple vulnerabilities (d9e82328-a129-11e7-987e-4f174049b30a)

SO-AND-SO reports : CVE-2017-12814: $ENV$key stack-based buffer overflow on Windows A possible stack-based buffer overflow in the %ENV code on Windows has been fixed by removing the buffer completely since it was superfluous anyway. CVE-2017-12837: Heap buffer overflow in regular expression...

Mongoose Embedded Web Server Library 6.8 Buffer Overflow Exploit

Exploit for multiple platform in category remote exploits Product: Mongoose Embedded Web Server Library Vendor: Cesanta CVE ID: Not yet assigned. CSNC ID: CSNC-2017-023 Subject: Stack based buffer overflow Risk: High Effect: Remotely exploitable Author: Dobin Rutishauser Date: 2017-09-20...

CVE-2017-14639

AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service application crash or possibly unspecified other impact...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3422-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3422-1 advisory. It was discovered that a buffer overflow existed in the Bluetooth stack of the Linux kernel when handling L2CAP configuration responses. A physically...

RHEL 6 : MRG (RHSA-2017:2705) (BlueBorne)

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

SUSE SLES11 Security Update : xen (SUSE-SU-2017:2450-1)

This update for xen fixes several issues. These security issues were fixed : - CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information XSA-226, bsc1051787. - CVE-2017-12137: Incorrectly-aligned updates...

CVE-2017-14411

A stack-based buffer overflow was discovered in copymp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution...

CVE-2017-14408

A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service...

CVE-2017-14408

The CVE-2017-14408 entry relates to MP3Gain (mpglibDBL) where a stack-based buffer over-read in dct36 (layer3.c) can crash an affected application, enabling remote denial of service. Connected sources confirm this issue across multiple advisories for MP3Gain 1.5.2 and describe a similar pattern o...

CVE-2017-14408

A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service...

CVE-2017-14411

CVE-2017-14411 affects MP3Gain 1.5.2 via a stack-based buffer overflow in copy_mp within interface.c of mpglibDBL, causing an out-of-bounds write that can lead to remote denial of service or potentially code execution. Multiple connected records (Red Hat, Mageia, OSV, CNVD, CNVD-2017-33787) corro...

CVE-2017-14408

A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service...

ZScada Modbus Buffer 2.0 - Stack-Based Buffer Overflow Exploit

Exploit for windows platform in category remote exploits require 'msf/core' class MetasploitModule 'ZScada Net Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Z-Scada Net 2.0. The vulnerability is triggered when parsing the response to a Modbus...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20170912) (BlueBorne)

Security Fixes : - A stack-based buffer overflow flaw was found in the way the Bluetooth subsystem of the Linux kernel processed pending L2CAP configuration responses from a client. On systems with the stack protection feature enabled in the kernel CONFIGCCSTACKPROTECTOR=y, which is enabled on al...

CVE-2017-14265

A Stack-based Buffer Overflow was discovered in xtransinterpolate in internal/dcrawcommon.cpp in LibRaw before 0.18.3. It could allow a remote denial of service or code execution attack...

CVE-2017-14265

CVE-2017-14265 is a stack-based buffer overflow in LibRaw’s xtrans_interpolate function (internal/dcraw_common.cpp) present in LibRaw releases before 0.18.3. The vulnerability can allow a remote denial of service or code execution when processing crafted images. Public reports from Debian and Mag...

EulerOS 2.0 SP1 : poppler (EulerOS-SA-2017-1229)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack-based buffer overflow was found in the poppler library. An attacker could create a malicious PDF file that would cause applications tha...

EulerOS 2.0 SP2 : poppler (EulerOS-SA-2017-1230)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack-based buffer overflow was found in the poppler library. An attacker could create a malicious PDF file that would cause applications tha...